This sounds like sessions not being locked. Do a directory search on the
web project, for "session." "server." "application." and look with those
occurrences, if the have been embedded in a CFLOCK tag.

Micha Schopman
Software Engineer

Modern Media, Databankweg 12 M, 3821 AL  Amersfoort
Tel 033-4535377, Fax 033-4535388
KvK Amersfoort 39081679, Rabo 39.48.05.380

------------------------------------------------------------------------
------------------------------------------------------------------------
-----
Modern Media, Making You Interact Smarter. Onze oplossingen verbeteren
de interactie met uw doelgroep. 
Wilt u meer omzet, lagere kosten of een beter service niveau? Voor meer
informatie zie www.modernmedia.nl 
------------------------------------------------------------------------
------------------------------------------------------------------------
-----

-----Original Message-----
From: Andrew Grosset [mailto:[EMAIL PROTECTED] 
Sent: woensdag 26 januari 2005 3:33
To: CF-Talk
Subject: Re: Sessions being show to wrong users?

>Hello,
>I have a login script on my site. It sets up a small series of session 
>variables.
>
>I am running CF 5, patched, on a very new server, with ample memory and

>CPU. The server is hardly loaded, according to stats.
>
>This script was written about two years ago, and has not changed.
>
>Session information is stored in session variables.
>
>Very recently, a few visitors to my site arrive at the site and appear 
>to be logged in as other member's of the site. Some of them may not 
>even log in. I have restarted the cold fusion service. 
>This problem still persists. 
>
>It appears that session variables are bleeding across to other sessions

>on the site.
>
>I have started doing logging based on IP when initially logged in, and 
>the IP as they browse from page to page.  I have found in a few 
>instances, the IP from the login, and the IP accessed via cgi aren't
even from 
>the same subnet.  These are always the sessions that have the wrong 
>information.
>
>Has anyone seen this problem?
>
>Thank you -

can you post some code - showing how the session variables are set and
read?



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:191759
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to